ID: CVE-2024-5203
Published: 2024-06-12T09:15Z
Description: description_data: A Cross-site request forgery (CSRF) flaw was found in Keycloak and occurs due to the lack of a unique token sent during the authentication POST request, /login-actions/authenticate. This flaw allows an attacker to craft a malicious login page and trick a legitimate user of an application into authenticating with an attacker-controlled account instead of their own.
CWE: problemtype_data: description: CWE-352